[Snyk] Security upgrade @strapi/strapi from 4.2.3 to 5.0.0

[EdgeToLife]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	Yes	No Known Exploit
	701/1000 Why? Recently disclosed, Has a fix available, CVSS 8.3	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8172694	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @strapi/strapi

The new version differs by 250 commits.

• ce84fad v5.0.0
• 506f8c8 v5.0.0-rc.30
• 726f3cc Merge pull request #21314 from strapi/fix/cm-validation
• f3ac9da fix: roles creation
• 6f3a228 v5.0.0-rc.29
• 2ee3865 fix: update schemas to have nullables where needed
• c0743ba chore: upgrade undici to 6.19.2 (#21275)
• b5354ba fix: checks
• 46c7eec chore: upgrade sanitize-html to 2.13.0 (#21278)
• 7f96957 chore: upgrade ws to 8.17.1 (#21277)
• 5d0c1f9 fix: history fields width (#21313)
• f2ff351 Merge pull request #21310 from strapi/fix/i18n-rbac-locale-switch
• f3c30df Merge branch 'releases/5.0.0' into fix/i18n-rbac-locale-switch
• 0faf896 fix: cm validation logic is broken
• 42f0cd4 v5.0.0-rc.28
• ca27873 fix(content-manager): wip pass userbac context for accurate query params
• 6c96a73 fix(rw): check transition permission to change assignee (#21311)
• c1d097e fix: do not use single type id in useDoc
• 53b1174 Merge pull request #21308 from strapi/fix/invalidate-documents-when-release-published
• b2e22bd chore: clean up
• 0a14b9e fix: manyToOne relation input (#21299)
• 572196a fix(content-manager): wip correct permissions when switching locales
• 3afad34 v5.0.0-rc.27
• 259ecdd fix(content-releases): invalidate documents when release is published

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)